Role Description We are seeking an experienced Senior Security Operations Engineer to lead and scale our security operations. You will be responsible for safeguarding our systems, networks, and data from cyber threats. This role requires a deep understanding of security monitoring, incident response, and automation, along with the ability to collaborate cross-functionally with IT, engineering, and compliance teams. This is a “hands on” technical role and a great opportunity to join a growing company with a large scale production environment. The right candidate will be a self-starter that can quickly put together a roadmap of security initiatives and work with engineering teams in a positive manner around implementing security controls. - Lead day-to-day security operations, including monitoring, detection, investigation, and response to security incidents. - Understand modern cloud infrastructure stacks and inject security controls in those stacks (e.g., Terraform, Kubernetes, CI/CD, ArgoCD, Github). - Develop, refine, and maintain SIEM rules, alerts, dashboards, and playbooks for proactive threat detection. - Drive incident response efforts, including triage, containment, eradication, recovery, and post-incident reporting. - Automate repetitive SecOps processes (e.g., enrichment, remediation, alert triage) to improve efficiency and reduce noise. - Conduct threat hunting activities to identify hidden threats and vulnerabilities. - Collaborate with devops and engineering teams to embed security best practices into systems and workflows. - Perform log analysis and security monitoring across cloud, endpoint, and network environments. - Lead security assessments and participate in vulnerability management and remediation programs. - Partner with compliance and risk management teams to support audits and regulatory requirements. Qualifications - 5+ years of hands-on experience in Security Operations. - Strong knowledge of SIEM platforms. - Expertise in threat detection, malware analysis, and forensic investigation. - Proficiency with scripting and automation tools (Python, Bash, etc.). - Solid understanding of network protocols, firewalls, IDS/IPS, EDR, and cloud security controls. - Experience with cloud platforms (AWS and GCP) and their native security services. - Familiarity with MITRE ATT&CK, NIST, ISO, and other security frameworks. - Excellent communication and leadership skills, with experience guiding teams or projects. - Security certifications a plus. Benefits - 100% remote within the US. - Flexible vacation policy. - Annual vacation allowance for travel-related expenses. - Three-day weekend every month of the year. - Competitive compensation. - 100% healthcare coverage. - 401k plan. - Flexible Spending Account (FSA) for dependent, medical, and dental care. - Access to coaching, therapy, and professional development. Company Description MNTN provides advertising software for brands to reach their audience across Connected TV, web, and mobile. MNTN Performance TV has redefined what it means to advertise on television, transforming Connected TV into a direct-response, performance marketing channel. Our web retargeting has been leveraged by thousands of top brands for over a decade, driving billions of dollars in revenue. - Our solutions give advertisers total transparency and complete control over their campaigns all with the fastest go-live in the industry. - As a result, thousands of top brands have partnered with MNTN, including Tarte, Decked, and National University.

• Responsible for the tools, configuration, administration and related processes around Security Information and Event Management. • Responsible for Web application firewall and related prevention, detection and mitigation of DDoS attack. • Performs regular firewall audits in line with our procedures. Provides the appropriate documentation, supporting evidence and follow up on identified issues requiring remediation. • Responsible for tooling, processes and follow up actions related to our vulnerability scanning and external port scanning needs and practices. • Handles the identification, planning and implementation of cloud hardening needs. Works collaboratively with Operations and other internal teams to communicate, document and implement. • Performs security incident analysis, response and remediation. • Participates in design and implementation of security automation workflows. • Maintain the technical documentation of processes and procedures. • Perform scripting duties in Bash and Python. • Maintain an advanced level of knowledge of JAMF Cloud Services and related products. • Other duties and special projects as assigned.

• Manages and is responsible for the successful completion of all tasks in assigned projects. • Contribute to the Security Operations and Engineering Team focused on maintaining the security integrity of the client's mission critical suite of applications. • Available 24/7 for any critical security incident response that may arise which requires immediate resolution. • Work to ensure security tooling within environments is operational and operating at needed levels of service and availability. • Ensure operational practices provide a sound foundation that utilizes tools and processes for rapid identification of security events to address and mitigate risks. • Assist in Plan, organize, and execute multiple responsibilities to achieve project goals and provide technical leadership to move operational projects to completion. • Contribute to security requirements, standards, procedures, and reference architectures to comply with policies and technical standards. • Develop and maintain incident response playbooks specific to AI/ML security threats including prompt injection, model poisoning, data exfiltration, and adversarial attacks. • Monitor and secure generative AI systems, large language models (LLMs), and AI-powered applications within environments. • Contribute to AI governance frameworks and policies ensuring responsible AI practices and compliance with AI-specific security standards. • Analyze and evaluate security implications of new AI/ML tools and platforms before deployment to production environments. • Participate in AI threat intelligence activities and stay current with emerging AI security vulnerabilities and attack methodologies. • Conduct post-incident analysis for AI-related security events and develop preventive measures specific to AI threat vectors. • Review and validate AI model security properties, including robustness against adversarial inputs and data privacy protections.

• Lead the creation and execution of earned media strategies that align with BDS objectives, including proactive outreach and engagement with key media stakeholders. • Maintain strong relationships with trade media, ensuring timely and accurate coverage of BDS initiatives and stories. • Edits and ensures first-time quality for news releases and Response-to-Query (RTQ) documents, de-conflicting potential issues. • Collaborate with communications colleagues and subject matter experts to identify emerging issues and opportunities, adjusting strategies as necessary to maximize impact. • In alignment with BDS Comms partners, develop and execute owned media strategy for aligned portfolio, especially during surge efforts (major events and milestones). • Generate opportunities to deploy the BDS narrative or BDS-level narrative pillars across Paid, Earned, Shared and Owned (PESO) channels. • Collaboratively, proactively manage and streamline External Communications (EC) meetings, processes, reports and tools. • Help build a consistent approach and governance to implement and maintain Proactive News Agenda tracking through Opal. • Develop and drive Issues & Positions development process. • Manage the drafting, editing, and distribution of press materials, including press releases, media advisories, and company statements. • Manage External Communications function measurement dashboard, aligned with Analytics, Tools & Artificial Intelligence (AI) Strategy team. • Monitor earned, owned and shared media coverage, and analyze results to inform future communications strategies and improve outcomes.